@belle: "Hai, =
=A0
Just a question .
Why are the Principals in the dns.keytab=A0=A0 different from what is in th=
e named.conf.update file. =
=A0
ktutil:=A0 rkt /var/lib/samba/private/dns.keytab
ktutil:=A0 list
slot KVNO Principal
  -=
=A0=A0 1=A0=A0=A0 1 DNS/<email_address>
=A0=A0 2=A0=A0=A0 1=A0=A0=A0=A0=A0=A0=A0=A0=A0 <email_address>=
TLD
=A0
=A0=A0 =
=A0=A0 =
cat /var/lib/samba/private/named.conf.update =
=A0
=A0=A0 update-policy {
=A0=A0=A0=A0=A0=A0=A0 grant INTERNAL.DOMAIN.TLD ms-self * A AAAA;
=A0=A0=A0=A0=A0=A0=A0 grant <email_address> wildcard * A =
AAAA SRV CNAME;
=A0=A0=A0=A0=A0=A0=A0 grant ijohnson@example.com wildcard * A AAAA =
SRV CNAME;
};
=A0
=A0=A0 =
=A0=A0 =
=A0=A0 in reverse =
=A0 =
=A0=A0=A0=A0=A0=A0=A0=A0=A0 update-policy {
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 grant *.DOMAIN.TLD wildcard *=
.123.168.192.in-addr.arpa. PTR;
=A0=A0=A0=A0=A0=A0=A0 };
=A0
=A0
=A0
I would expect too see in the dns.keytab also =
=A0=A0=A0=A0=A0=A0=A0=A0 ijohnson@example.com
But its not there any reason for this of am i missing something. =
( this is not my expertise, but any insight in this would be nice. ) =
=A0
Thank! =
=A0
Louis
=A0
=A0
 =
To unsubscribe from this list go to the following URL and read the
instructions:  <url>"
    @abartlet: "<quote>
The dns.keytab entries are the DNS server accounts, while the
named.conf.update principals are the clients permitted to make
unrestricted DNS changes.  
In the default bind9_dlz configuration, the named.conf.update is
overridden by the internal ACL processing in the DLZ module
Andrew Bartlett
Andrew Bartlett                       <url>
Authentication Developer, Samba Team  <url>
Samba Developer, Catalyst IT          <url>
To unsubscribe from this list go to the following URL and read the
instructions:  <url>"
{'source': 'USENET', 'other_information': '{"reply_count": 1, "forum_name": "linux.samba.20150324.mbox"}', 'file': 'data/output/usenet-linux.samba.parquet'}